Copilot for Microsoft 365

Microsoft have announced that Copilot for Microsoft 365 will be released for enterprise customers from the 1^st of November 2023, with the release date for SMB customers proposed for early 2024.

Copilot for Microsoft 365 is an AI assistant that helps users to streamline their work activity by creating content, learning from past actions, and solving time-consuming problems. It uses Large Language Models (LLMs) to help process natural language queries and generate relevant and responsible actions from a user’s data and the web. It works across Microsoft 365 apps such as Word, Excel, PowerPoint, Outlook and Teams, and also offers enterprise-grade security, privacy and compliance

Copilot in Windows

To help drive your business forward, your organisation needs to be at the forefront of AI but also protecting the corporate data that you share with AI models.   

Copilot in Windows has addressed this problem with Bing Chat Enterprise. Bing Chat Enterprise brings the same time-saving and intelligent capabilities of Copilot but with added protections to help businesses guard their commercial data. You can direct Copilot to quickly make sense of long articles on the web, craft and polish content or create stunning images all from within a secure Windows 11 experience. When using Bing Chat Enterprise, none of your sensitive corporate data is shared or used to train the LLM.  

A preview of Copilot in Windows became available with the 22H2 version of Windows 11 which was released on the 26^th of September 2023.  

You can help your organisation take advantage of generative AI in Windows by modernising your IT Infrastructure.

• Modernise your infrastructure with Microsoft 365 – The best way for your organisation to manage Copilot in Windows, is to utilise a cloud-based approach. ‘Functional Productivity’ is Microsoft’s term for making sure your workloads are in the correct location and structure to enable secure productivity and the most efficient use of Copilot is through a cloud-based solution.
• Adopt Windows 11 – Now is the time to upgrade to Windows 11. Windows 11 offers features that are designed to support seamless hybrid working, advanced security, cloud-based collaboration, and accessible and inclusive experiences for all.

If you are looking to take advantage of these capabilities in your organisation, get started today by talking to your Account Director or emailing us at copilot@utilize.co.uk  you can also register for our upcoming Copilot webinar by clicking here: Introducing Microsoft 365 Copilot: The AI-Powered Future of Work

Contact Utilize

Utilize have seen an increase in advanced Phishing Email Attacks and CEO impersonation emails across our client base and in the Cyber Security Space.

 

Phishing Attacks

Attackers can now pay for AITM (Adversary Man in the Middle) services on the DarkWeb. Essentially this is a Service where, you can import targets email addresses and it will send them a specifically crafted email link. Once this link is clicked it will load a very genuine looking website, hoping the recipient will input their Office365 credentials. Simply put, this website acts as a middle proxy server sending your genuine credentials to Office365 services, then displaying an MFA prompt for the user to approve. If this is done, the attacker not only has your Office365 credentials, but also the MFA token to use for future use for 90 days. Until the token is revoked, and credentials changed the attacker can access everything you can in Office365!

This is why it’s imperative to not input any credentials or approve any MFA prompts unless:

1. You know it’s a genuine MFA prompt you are expecting

2. The website address is a genuine Office365 website

If you are ever unsure, pause what you are doing and log a ticket with the Utilize Service Desk who can confirm if genuine. Either by email: service@utilize.co.uk or telephone 0333 006 9060.

Attackers are investing more resources, time, and money in these attacks to try and fool targets. Most attacks rely unfortunately on social engineering, to try and trick the end user into believing a link or website is legitimate.

Let’s take a look at some examples we have seen in the ‘wild’.

The “QR Code” Type Attack

Because most spam filtering will scan links and attachments in emails, attackers have tried to think ‘outside the box’ by creating a QR code which when scanned will take you to a fake Office 365 website. (The image had been obscured for security reasons)

 

The “AITM Phishing” Type Attack

This is where you receive an email with a link that takes you to a fake Office365 website. This could be from a company or contact you deal with regularly, or a random email address. Remember, it’s always possible someone you deal with regularly has been breached and the attacker is leveraging your relationship with that person…abusing trust! See example image below, it looks exactly the same as the official Office365 website, but it is malicious!

NOTE: website address is not https://portal.office.com or https://login.microsoftonline.com

 

The MFA Bombing Attack

This is where an attacker keeps trying to log into your Office365 with the correct credentials obtained via DarkWeb or alike, until you approve the MFA prompt. They rely on the annoyance of you continually getting MFA prompts, until you reluctantly approve one, therefore letting them into your account. Office365 will not continually prompt you for MFA, so if this happens it’s likely someone is trying to get into your account. Again, if you are unsure or if there is anything out of the ordinary please contact us.

CEO Impersonation Phishing

Firstly, these types of attacks rely on pressure, speedy response, and trust. Typically, these are spear-phishing emails where an attacker impersonates the CEO or another Senior high-ranking employee within your organisation. These will generally try and trick you into transferring money owned by the attacker or sending HR confidential information for extortion. These can be sent to your work email, personal email, WhatsApp, SMS, or any other method of communication an attacker can find online.

Secondly, challenge yourself with what information you want to put online, if it’s online – Ask yourself, if it’s online, who can access it? Look at your LinkedIn or Facebook accounts, could an attacker answer any of your password recovery questions? Where did you grow up? Where did you go to school? What is your personal contact email or phone number? All of these pieces of information paint a picture, and most of the time these are a piece of the puzzle for an attacker.

Thirdly, when an email comes in always check the email address this has come from. Whilst the display name could be the actual CEO’s name, double check the actual email address. Anyone can setup a Hotmail or 3^rd party email account in someone’s name. Would your CEO really email you direct to transfer money, or request thousands of pounds in iTunes vouchers? If you are ever unsure PAUSE, pick up the phone and call the person on the number you know is theirs and NOT by the number they have provided! Example below…

 

As with any security issue, if you have entered any credentials, or want to check the legitimacy of an email please contact Utilize immediately.

There are many things that you can do to protect your organisation and Utilize offer many services such as Office365 MFA, DarkWeb Scanning and simulated Phishing training. Contact us for more information or speak to your Account Director.

Remember proactive security is just the first step, don’t get caught out!

Contact Utilize

Microsoft Inspire is the annual event where Microsoft partners connect, empower and celebrate as one community, gaining insights into what’s coming in the year ahead. This year’s event, held on July 18th and 19th, was focused on accelerating AI transformation through partnership, and featured several exciting announcements and innovations that showcased how Microsoft and its partners are reshaping the future of business with AI.

Here are some of the key highlights from Microsoft Inspire 2023:

• Microsoft 365 Copilot understands natural language and can help users with various tasks, such as summarization, post meeting recap, writing, editing, formatting, researching, presenting, and collaborating. And secure productivity is the first step to helping our customers get ready for Copilot. Microsoft has released pricing for Microsoft 365 Copilot with the cost per user being $30 USD along with a Microsoft 365 E3, E5, Business Premium, and Business Standard license.
• Bing Chat Enterprise the AI-powered copilot for the web allows users to make use of ChatGPT4 powered AI features while protecting all personal and company data. It is now in preview at no additional cost for customers with Microsoft 365 E3, E5, Business Premium, and Business Standard licenses.
• Microsoft Cloud for Sustainability is a new offering that helps organisations measure, report, and reduce their environmental impact with data-driven insights and actionable recommendations.
• Microsoft Viva Connections, a new module of the employee experience platform that enables leaders to communicate with their teams and foster a culture of engagement and wellbeing.
• Microsoft Power Platform Process Advisor, a new feature that helps users discover, prioritise, and automate processes using AI-powered process mining.
• Microsoft Teams Rooms Premium, a new service that provides end-to-end management of meeting rooms, including device setup, monitoring, maintenance, and support.
• Microsoft 365 Sales Copilot is a new feature that helps sales teams optimize their performance and productivity. It uses artificial intelligence to provide insights, guidance, and recommendations based on data from Microsoft 365, Dynamics 365, and LinkedIn.

These are just some of the announcements that demonstrate how Microsoft and its partners are driving AI innovation across industries and business. To learn more about Microsoft Inspire 2023 and watch the full keynote speeches and sessions, visit https://news.microsoft.com/inspire-2023/.

You can register to attend our next Microsoft 365 Copilot webinar being held on Thursday 7^th September at 11.00. Utilize will be joined with Microsoft who will talk about how Microsoft’s powerful new AI technology can boost productivity, creativity, and communication in your business.

Click here to register: Microsoft 365 Copilot Webinar

Contact Utilize

Looking into the world of Cyber Insurance can seem daunting and it can be difficult to know where to begin and what you need to be eligible. We have created a brief overview of Cyber Insurance and the benefits to your business by implementing it, as well as how you can bring down your premiums with Cyber Essentials.  

Cyber Insurance is designed to support and protect your organisation in the event of an accidental or malicious data breach or data incident.  

Your business needs to consider Cyber Insurance if:  

• You run business software on a computer
• If you store any personal information or email addresses of employees or clients on a computer 
• You take/make card or electronic payments  
• You have a website for your business or use cloud storage for any data 

This information can be highly dangerous if it gets into the wrong hands. It is important to build up a full understanding of how you’re impacted if your business suffers a security breach, and the effects this will have on your organisation. 

For example, ransomware could leave your systems or devices unavailable, or you could potentially lose either your data or your customers’ data due to virus or malware infection. Then there is the financial impact on your business caused by downtime and the associated costs required for response and recovery.  

Most policies will cover costs that are directly associated with a security breach including documenting and investigating the attack, data recovery and hardware repairs, notifying consumers and regulatory agencies, crisis management and PR damage control if required.   

At a minimum, a company interested in buying cyber insurance must have the following safety measures in place:  

• Security awareness training and testing for all employees 
• All PCs must have antivirus software and this software must be kept up to date 
• The company network must be protected using a firewall  
• User accounts and their associated permissions must be routinely audited as well as secured with Multi-factor Authentication 
• The utilisation of central patch management, ensuring critical updates are applied in a timely manner 
• Business data must be regularly backed up using external media or a secure cloud service, to ensure the backups are separated from the systems they are backing up  
• Companies must use endpoint protection and intrusion detection to stop attacks
• Businesses must implement regular vulnerability scanning and penetration tests 

Before considering any Cyber Insurance, you need to make sure your organisation is protected from attacks in the first place by ensuring you have fundamental cyber security safeguards in place, such as those included in the Cyber Essentials or Cyber Essentials Plus certification. 

When you implement Cyber Essentials or Cyber Essentials Plus, you are also provided with a basic level of cyber insurance. This is only a baseline policy, and many businesses choose to expand on this cyber insurance policy to ensure they are protected to a sufficient level to match their business requirements. The good news is, being Cyber Essentials certified will help to lower your insurance premium by demonstrating you are reducing your risks of cyber-attacks to insurance underwriters.  

Some insurers will even offer discounts if your organisation has implemented a recognised cyber security standard such as Cyber Essentials or Cyber Essentials Plus. These certifications demonstrate to your customers and other stakeholders that adequate cyber security controls have been put in place. 

To find out more about Cyber Essentials, speak to one of our security experts.

Contact Utilize

Utilize Plc is proud to announce that we have recently become an accredited Living Wage Employer. We are thrilled to join a community of over 7,000 employers in the UK who believe in paying their employees a fair wage.

The Living Wage is an independently calculated hourly rate of pay that is based on the cost of living in the UK. It is higher than the government’s minimum wage and is designed to ensure that workers can earn enough money to live comfortably and support themselves and their families.

We believe that all workers should be paid a wage that allows them to live with dignity, and by becoming a Living Wage Employer, we are demonstrating our commitment to treating our employees fairly and ethically.

At Utilize, our employees are our greatest asset, working hard every day to deliver the best possible service to our clients. By paying the Living Wage, we are not only recognising their hard work and commitment, but we are also helping to create a more sustainable and equitable economy.

Becoming a Living Wage Employer endorses our commitment to making a positive impact on the lives of our employees, clients, and community, and we believe that paying a fair wage is an important step in achieving that goal.

We hope that other companies will follow our lead and make the commitment to pay their employees a wage that allows them to live in comfort and security. Together, we can create a more just and equitable society for everyone.

Learn more about our values

Every business has unique circumstances and requirements, and there are many reasons why businesses may choose to upgrade from Sage 50 to a different accounting software. We advise conducting a thorough analysis of your current and future business needs before making any decisions about upgrading your accounting software.

So, what are the key questions you need to be asking?

1. Web Portals: In today’s fast-paced business environment, remote access to accounting information is becoming increasingly important. Does your business need access to accounting information while on the go? Then you may need to upgrade to a solution that offers remote access.

2. Scalability: As your business grows, you may need a more scalable accounting software solution that can accommodate larger amounts of data, users, or transactions.

3. API Integration: If your business needs to integrate its accounting software with other business software applications, you may need to upgrade to a solution that offers better integration capabilities.

4. Need for advanced features: Has your business outgrown the basic features of Sage 50, and do you need more advanced features that can handle increasing complexity, such as more extensive reporting, inventory tracking, or multi-currency support.

5. Support and maintenance: If your business is experiencing frequent issues or requires technical support, it may need to upgrade to a solution that offers better support and maintenance options.

Ultimately, the decision to upgrade from Sage 50 depends on the unique needs and circumstances of each business. Asking the right questions will enable you to make an informed and future-proofed decision.

At Utilize we work to gain a deep understanding of your business processes and needs, and we have the Sage expertise and experience to advise you on the right solution for your business. Why not talk to one of our Sage Consultants today about your next steps.

Register for our upcoming Sage Webinar

Interested to learn about 4 reasons on why to upgrade? Click here

Checkout our latest case study: 

Utilize Sage Development Team save time and resources with a new Purchase Transaction Authorisation for our client Vegetarian Express

 

Learn more about our Finance offerings

Cloud-based services and their benefits are undeniable, and businesses are increasingly turning to Microsoft 365 and its suite of tools when moving to the Cloud. Offering data storage, email services and productivity tools, it’s no surprise Microsoft 365 users feel as though their data is safe and secure. However, if a third-party backup is not in place, the risk of losing all your data is still a real possibility. 

Microsoft 365 will only guarantee 90% of your data for as little as 30 days, consequently, even Microsoft themselves recommend regular backups in their service agreement. 

There are multiple ways in which you could lose your data including, accidental deletion or Cybercriminals encrypting or deleting data, ensuring you have it backed up is vital to protecting your business and your clients.  

We have introduced M365 Cloud Backup to meet this critical need for Cloud-based protection. With M365 Cloud Backup you gain a flexible and simple solution for the protection, management, and recovery of your Microsoft 365 data. It can quickly recover a file, folder or all account data easily in its original format. It ensures your business data is protected, encrypted and made available through an intuitive, web-based interface. 

M365 Cloud Backup enables you to deliver better service, improve efficiency, and simplify the backup and data protection process.  

Why not talk to us today about how M365 Cloud Backup can help you.

Learn more about M365 Cloud Backup

In today’s digital era, businesses rely heavily on storing and processing data, making it a valuable asset. However, this data is at risk of being compromised and falling into the hands of cybercriminals. Online criminal marketplaces like Genesis Market offer a platform for the sale of stolen data, such as login credentials, IP addresses, and sensitive information, to other criminals who have malicious intentions.

Genesis Market, for instance, has been known to sell sensitive information for as little as £0.80, providing easy access to valuable data like banking and social media accounts. Cybercriminals can use this data to perpetrate various fraudulent activities, causing significant harm to individuals and businesses alike.

Law enforcement agencies, including the FBI and other international bodies, have launched numerous operations against such online criminal marketplaces, such as ‘Operation Cookie Monster.’ The aim of these operations is to end the illicit sale and laundering of stolen data. These efforts have resulted in hundreds of searches and arrests worldwide.

It is crucial for businesses to protect their data from cyber threats by investing in cybersecurity measures, such as firewalls, anti-virus software, and regular software updates. Employers should also educate employees on safe online practices and implement strict password policies to reduce the risk of unauthorized access to sensitive information. By taking these precautions, businesses can protect their data and prevent malicious attacks from cybercriminals.

How can you remain safe?

As the threat of cyberattacks continues to grow, businesses need to be vigilant in protecting their valuable data. Utilize offers additional Managed Security resources to help keep your business safe and secure. Our team of Cybersecurity Experts can help identify potential vulnerabilities and provide proactive measures to ensure your data remains protected.

In addition to our Managed Security services, Utilize offers on-demand video content to help educate businesses about the dark web and staying secure. Our video content covers a range of topics, including how cybercriminals operate, common attack methods, and ways to safeguard your business against cyber threats.

Why not view our on-demand Dark Web Webinar for tips on how to keep your business secure.

Learn about Managed Security

Ultimately, the value of a lost call depends on your business’s specific circumstances and priorities. Calculating an accurate value for lost sales depends on several factors, such as the nature of your business, the type of calls you typically receive, and the potential value of each call.  

If your business relies heavily on phone calls for sales, customer service, or support, then a lost call could mean a missed opportunity to generate revenue or retain a customer. If for example your business missed just three calls each week, equating to 156 potential lost sales each year, the lost opportunities become apparent.  

For example 

• In hospitality, 25% of calls get missed. With a restaurant meal for two people costing on average £74, this adds up to a lot of missed revenue. 
• In recruitment, a sector which relies heavily on telephone engagement to capture new candidates and new employers, recruitment agencies are missing 21% of calls. Think of all that lost commission! 
• In the motor trade, car dealerships miss 15% of calls. With the average car in the UK costing £38,000 that’s a lot of missed order revenue – and pull-through revenue from servicing, too. 

• In the property sector, estate agency fees on a UK property sale average £4,025 – yet agents are missing 7% of inbound calls. 
•  For franchisees, the cost of a missed call can range between £400 and £43,600, depending on the services you provide. 

 Equally the reputational damage caused if you are unable to respond to existing customers’ needs in a timely and satisfactory manner, can be detrimental to ongoing and future revenue streams. 

It’s therefore advisable to have a reliable phone system in place that can help you manage your calls effectively and minimize the chances of missing important calls. Onboarding a platform such as Akixi, allows you to view and track live call reporting, providing a real-time summary for your business.  

One of the most impactful reports that Akixi offers is the ability to recapture all your lost callers by tracking them and your returned missed calls in a live view. The platform will provide a list of received calls over a selected period of time which is generated in a colour-coded system to help you navigate their status.

 

As demonstrated in the example above, missed calls will highlight in red so you can see what calls need actions placed against them. When a member of your team returns the call, or if the customer calls back and gets through, the row will turn green and eventually drop off the report. You can also use the built-in call controls to respond to missed calls directly from the report.

Why not talk to us today about how Akixi can ensure your business never misses another valuable call.

Want a more hands on approach with Akixi? Why not join our informative Akixi Webinar and discover more.

Learn more about Akixi